Apple ID hacked by someone

If you do not see the purchase by using: See your purchase history in the App Store or iTunes Store - Apple Support, or If you see 'itunes.com/bill' or an unfamiliar charge on your statement - Apple Support, the email is most likely a scam.

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support describes how to identity/report the email.

Apple will always address you by your name or the name they have on file for you, not Dear Customer, Dear Client or by using your e-mail address.  The e-mail will be from @apple.com or @iTunes.com. E-mail addresses can be spoofed. You can go to Mail/View/Message/Show all Headers to see more. Apple e-mails will never contain an attachment. Apple will never request personal information by email such as Social Security numbers, your Mother’s maiden name or full credit card numbers .

The only exception to the above I have noticed is if you order something from the Apple Store (apple.com), your receipt will be addressed to Dear Apple Customer. That is a receipt for a purchase you initiated.